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back and detection. Thus, the deadlock, exception, and cfv. categories represent faults 
that are covered by Restore while, faults in the sdc and latent ... 

www.crfic.utuc.edu/ACS/pub/dsn05.pdf - Sjmijar.pa.ges 

timed calculus of cryptographic communication 

By using reachability tree analysis method to analyze the safety properties of the integrated 
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Such values can be malignant, in that these values can cause a kernel panic if ... To avoid 
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X mid-layer deadlock due to SCSI malloc fragmentation For pre-2.5. ... The cause of the 
slowdown is a 'swarm effect 1 : if lots of threads are blocked on a ... 

www.kemel.org/pub/iinux/kernel/v2. 5/ChangeLog-2. 5. 70 - 273k - Cached - SJMfeLpases 

Race control suspension - Patent 4532584 
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Thinking in C++ 2nd ed Volume 2 rev 19 
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Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 

Studies on Collaborative research 
Publisher: IBM Press 

Full text available: ^|>dft4,2i.M3) Additional Information: fujj.cjtatjon, abstract, references, index teres 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

2 improving the reliability of commodity operating systems 
|& Michael M. Swift, Brian N. Bershad, Henry M. Levy 

February 2005 ACM Transactions on Computer Systems (TOCS), volume 23 issue l 
Publisher: ACM Press 

Full text available: 'gj pdf(459.98 K3) Additional Information: full citation , abstract, references, index terms 

Despite decades of research in extensible operating system technology, extensions such 
as device drivers remain a significant cause of system failures. In Windows XP, for 
example, drivers account for 85&percent; of recently reported failures.This article 
describes Nooks, a reliability subsystem that seeks to greatly enhance operating system 
(OS) reliability by isolating the OS from driver failures. The Nooks approach is practical: 
rather than guaranteeing complete fault tolerance through ... 

Keywords: I/O, Recovery, device drivers, protection, virtual memory 
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Michael M. Swift, Brian N. Bershad, Henry M. Levy 

October 2003 Proceedings of the nineteenth ACM symposium on Operating systems 

principles 
Publisher: ACM Press 

Additional Information: fuJ].cltation, abstract, references, citings, index 
terms 



Full text available: ffifidft28278 KB) 



http://portal.acm.org/resultsxfm?coll=ACM&dl=ACM&CFro=8480293&CFTOKEN^ 1/7/07 



Results (page 1): cause detect latent deadlocks 



Page 2 of 7 



Despite decades of research in extensible operating system technology, extensions such 
as device drivers remain a significant cause of system failures. In Windows XP, for 
example, drivers account for 85% of recently reported failures. This paper describes 
Nooks, a reliability subsystem that seeks to greatly enhance OS reliability by isolating the 
OS from driver failures. The Nooks approach is practical: rather than guaranteeing 
complete fault tolerance through a new (and incompatible) OS ... 

Keywords: I/O, device drivers, protection, recovery, virtual memory 



Verification: Automated, scalable debugging of MPi programs with Intel© Message B 
Checker 

Jayant DeSouza, Bob Kuhn, Bronis R. de Supinski 

May 2005 Proceedings of the second international workshop on Software 

engineering for high performance computing system applications SE-HPCS 
05 

Publisher: ACM Press 

Full text available: ^i)dft239 A 87.J<B) Additional Information: fu]J,citatjon, abstract, references, index. teems 

The trend towards many-core multi-processor systems and clusters will make systems 
with tens and hundreds of processors more widely available. Current manual debugging 
techniques do not scale well to such large systems. Advanced automated debugging tools 
are needed for standard programming models based on commodity computing, such as 
threads and MPI. We surveyed MPI users to identify the kinds of MPI errors that they 
encounter, and classify the errors into several types. We describe how automate ... 

Keywords: MPI, MPI implementation validation, MPI standard checking, automated and 
scalable debugging, correctness/confidence tools, protocol verification 
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Automatic detection and re pair of errors in d ata structures 
Brian Demsky, Martin Rinard 

October 2003 ACM SIGPLAN Notices , Proceedings of the 18th annual ACM SIGPLAN 
conference on Object-oriented programing, systems, languages, and 

applications OOPSLA '03 f Volume 38 Issue 11 

Publisher: ACM Press 

Full text available: «J*dff340 56 KB) Addltional ,nformation: fuli citation - references , citings, index 

™ terms 

We present a system that accepts a specification of key data structure consistency 
constraints, then dynamically detects and repairs violations of these constraints, enabling 
the program to continue to execute productively even in the face of otherwise crippling 
errors. Our experience using our system indicates that the specifications are relatively 
easy to develop once one understands the data structures. Furthermore, for our set of 
benchmark applications, our system can effectively repair inco ... 

Keywords: data structure invariants, data structure repair 



Using meta-level compilation to check FLASH protocol code 
Andy Chou, Benjamin Chelf, Dawson Engler, Mark Heinrich 

November 2000 ACM SIGOPS Operating Systems Review , ACM SIGARCH Computer 

Architecture News , Proceedings of the ninth international conference 
on Architectural support for programming languages and operating 

systems ASPLOS-IX, Volume 34 , 28 Issue 5 , 5 
Publisher: ACM Press 
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Building systems such as OS kernels and embedded software is difficult. An important 
source of this difficulty is the numerous rules they must obey: interrupts cannot be 
disabled for ~too long," global variables must be protected by locks, user pointers passed 
to OS code must be checked for safety before use, etc. A single violation can crash the 
system, yet typically these invariants are unchecked, existing only on paper or in the 
implementor's mind.This paper is a case study in how system impl ... 
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Building systems such as OS kernels and embedded software is difficult. An important 
source of this difficulty is the numerous rules they must obey: interrupts cannot be 
disabled for "too long," global variables must be protected by locks, user pointers passed 
to OS code must be checked for safety before use, etc. A single violation can crash the 
system, yet typically these invariants are unchecked, existing only on paper or in the 
implementor's mind.This paper is a case study in how system impl ... 
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Many applications demand availability. Unfortunately, software failures greatly reduce 
system availability. Prior work on surviving software failures suffers from one or more of 
the following limitations: Required application restructuring, inability to address 
deterministic software bugs, unsafe speculation on program execution, and long recovery 
time.This paper proposes an innovative safe technique, called Rx, which can quickly 
recover programs from many types of software bugs, both det ... 

Keywords: availability, bug, reliability, software failure 
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Many techniques have been developed over the years to automatically find bugs in 
software. Often, these techniques rely on formal methods and sophisticated program 
analysis. While these techniques are valuable, they can be difficult to apply, and they 
aren't always effective in finding real bugs. Bag patterns are code idioms that are often 
errors. We have implemented automatic detectors for a variety of bug patterns found in 
Java programs. In this paper, we describe how we have used bug pa ... 
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An increasingly important trend in the engineering of complex systems is the design of 
component integration standards. Such standards define rules of interaction and shared 
communication infrastructure that permit composition of systems out of independently- 
developed parts. A problem with these standards is that it is often difficult to understand 
exactly what they require and provide, and to analyze them in order to understand their 
deeper properties. In this paper we use our experience in mod ... 

Keywords: component integration standards, component-based software, formal 
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This paper presents the design and an evaluation of Mondrix, a version of the Linux kernel 
with Mondriaan Memory Protection (MMP). MMP is a combination of hardware and 
software that provides efficient fine-grained memory protection between multiple 
protection domains sharing a linear address space. Mondrix uses MMP to enforce isolation 
between kernel modules which helps detect bugs, limits their damage, and improves 
kernel robustness and maintainability. During development, MMP exposed two kerne ... 
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In this paper, we describe TSOtool, a program to check thebehavior of the memory 
subsystem in a shared memorymultiprocessor. TSOtool runs pseudo-randomly 
generatedprograms with data races on a system compliant with theTotal Store Order 
(TSO) memory consistency model; it thenchecks the results of the program against the 
formal TSOspecification. Such analysis can expose subtle memory errorslike data 
corruption, atomicity violation and illegalinstruction ordering. While verifying TSO 
compliance comp ... 
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This paper describes RacerX, a static tool that uses flow-sensitive, interprocedural 
analysis to detect both race conditions and deadlocks. It is explicitly designed to find 
errors in large, complex multithreaded systems. It aggressively infers checking 
information such as which locks protect which operations, which, code contexts are 
multithreaded, and which shared accesses are dangerous. It tracks a set of code features 
which it uses to sort errors both from most to least severe. It uses novel ... 
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Parallel and Distributed Simulation (PADS) algorithms are typically categorized to belong 
to one of two categories. They are either conservative or optimistic with respect to the 
method of handling causality. Conservative systems strictly preserve causality, while 
optimistic systems detect and correct causality errors when they.occur. Time Warp is the 
basis of optimistic algorithms where rolling back the simulation clock allows the simulation 
to correct for errors. The Global Virtual Time ... 
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In this paper we study the use of Sequence Diagrams and Statecharts of the Unified 
Modeling Language (UML) for the validation and the performance evaluation of systems. 
We assume that the system is specified as a set of Statecharts and that Sequence 
Diagrams are used to represent "executions of interest". UML lacks a formal semantics 
and hence it is not possible to apply, directly, mathematical techniques on UML models for 
system validation. To reach this goal we propose an automatic translation ... 
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This paper is the current result of a study by the ISO HRG Rapporteur group which is 
being circulated for comment. Many people have contributed to this, but those who have 
either attended two recent meetings of group or have made substantial e-mail comments 
are: Praful V Bhansali (Boeing, USA), Alan Burns (University of York, UK), Bernard 
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Dynamic inference techniques have been demonstrated to provide useful support for 
various software engineering tasks including bug finding, test suite evaluation and 
improvement, and specification generation. To date, however, dynamic inference has only 
been used effectively on small programs under controlled conditions. In this paper, we 
identify reasons why scaling dynamic inference techniques has proven difficult, and 
introduce solutions that enable a dynamic inference technique to scale to I ... 
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Motivated by the growth of web and infrastructure services and their susceptibility to 
human operator-related failures, we introduce system-level undo as a recovery 
mechanism designed to improve service dependability. Undo enables system operators to 
recover from their inevitable mistakes and furthermore enables retroactive repair of 
problems that were not fixed quickly enough to prevent detrimental effects. We present 
the "three R's", a model of undo that matches the needs of huma ... 
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Assisted execution is a form of simultaneous multithreading in which a set of auxiliary 
"assistant" threads, called nanothreads, is attached to each thread of an application. 
Nanothreads are lightweight threads which run on the same processor as the main 
(application) thread and help execute the main thread as fast as possible. Nanothreads 
exploit resources that are idled in the processor because of hazards due to program 
dependencies and memory access delays.Assisted execution has the po ... 
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We present a system for extending standard type systems with flow-sensitive type 
qualifiers. Users annotate their programs with type qualifiers, and inference checks that 
the annotations are correct. In our system only the type qualifiers are modeled flow- 
sensitively— the underlying standard types are unchanged, which allows us to obtain an 
efficient constraint-based inference algorithm that integrates flow-insensitive alias 
analysis, effect inference, and ideas from linear type systems to supp ... 

Keywords: alias analysis, constraints, effect inference, flow-sensitivity, linux kernel, 
locking, restrict, type qualifiers, types 
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